high7.5
CVE-2024-11148
In OpenBSD 7.4 before errata 006 and OpenBSD 7.3 before errata 020, httpd(8) is vulnerable to a NULL dereference when handling a malformed fastcgi request.
Impact
In OpenBSD 7.4 before errata 006 and OpenBSD 7.3 before errata 020, httpd(8) is vulnerable to a NULL dereference when handling a malformed fastcgi request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openbsd | Openbsd | before 7.3 Versions 7.3, 7.4 |